PRIVACY POLICY - LAUNCHBASE

1. INTRODUCTION AND SCOPE

The purpose of this Privacy Policy is to define the rules applicable to the collection and processing of your personal data (hereinafter "Personal Data") via the Launchbase platform, published by The Machinery (hereinafter "We").

It details the Personal Data we collect, its use, and the means available to you to exercise your rights.

This Policy applies to unregistered users (hereinafter "Visitors") and users creating an account (hereinafter "Members").

This Policy does not cover services offered by third-party companies referenced on Launchbase. We are not responsible for their use of Personal Data.

2. ACCEPTANCE AND UPDATES TO THE PRIVACY POLICY

By using Launchbase, you accept our Privacy Policy. If you disagree with any of its terms, you are free not to use our services.

We reserve the right to modify this Policy at any time, particularly in the event of new data processing activities. You will be notified of significant updates by email or via our platform.

3. DATA CONTROLLER AND DPO CONTACT

The Machinery, as the publisher of Launchbase, is responsible for processing the collected data.

We have appointed a Data Protection Officer (DPO) for any questions related to the processing of your personal data. You can reach them at: [email protected]

4. WHAT PERSONAL DATA DO WE COLLECT?

We collect several categories of data depending on your use of the platform:

Technical Data

• IP address
• Cookies and trackers
• Logs and connection data
• Browsing data and interactions on the platform

User Identification Data

• First and last name
• Email address
• Professional status

Data Related to Support and Funding Structures

• Address
• Service
• Selection process
• Eligibility criteria
• Contact
• Web link

5. MANDATORY OR OPTIONAL DATA

Mandatory fields are marked with an asterisk. Refusal to provide them may prevent access to certain features.

Other data is optional but helps improve your user experience.

6. PURPOSES AND LEGAL BASES OF DATA PROCESSING

7. DATA RETENTION PERIOD

We retain your Personal Data for a duration appropriate to the intended purposes:

• Account data: Up to 3 years after last activity
• Applications and connection requests: 2 years after submission
• Cookies and trackers: 13 months
• Technical data and logs: 1 year

After expiration, your data is deleted or anonymized for statistical purposes.

8. RECIPIENTS OF YOUR PERSONAL DATA

Your data may be shared with:

• Technical service providers for hosting, maintenance, and traffic analysis
• Legal authorities if required by law

We do not sell any personal data to third parties.

9. DATA TRANSFER OUTSIDE THE EUROPEAN UNION

Your data is stored within the European Union. In case of transfer to a third country, we ensure that it provides an adequate level of protection (e.g., European Commission standard contractual clauses).

10. DATA SECURITY

We implement enhanced security measures to protect your data:

• Encryption of sensitive data
• Secure hosting in France
• Enhanced authentication
• Access monitoring and anomaly detection

11. EXERCISING YOUR RIGHTS

In accordance with GDPR, you have the following rights:

• Right of access: Obtain a copy of your data
• Right of rectification: Modify incorrect information
• Right of deletion: Delete your account and data
• Right to object: Refuse certain processing
• Right to data portability: Retrieve your data in a readable format
• Right to withdraw consent: For cookies and marketing communications

📩 Exercise your rights: Contact us at [email protected]

📌 Complaint: In case of dispute, you can contact the CNIL (www.cnil.fr)